I think all key signer extensions for browsers like Nos2x, Nos2x-fox and Alby require more permissions than they should. Right now they require at least “access your data for all websites” which I feel should be changed.

The extension could allow the user to add list of Nostr web client domain names to a whitelist on the extension settings and only allow access to data for those added domains.